OAuth 2.0 Error: Unauthorized email domain for authentication

Problem

When attempting to activate an IDE via the IDE Services Cloud license server, the error message appears:

"OAuth 2.0 Error: The specified email address belongs to a domain that has not been authorized for use with the authentication service. Please enter an email address from an authorized domain or choose another authentication method."

Cause

This error occurs when the email domain of the user's account is not included in the "Allowed emails and email domains" setting of the JetBrains Account authentication module in IDE Services (Hub). Users already authenticated before the restriction or imported manually may not be affected, which can create inconsistencies in authentication behavior.

Resolution

To resolve the issue, the following steps can be performed by the Hub administrator:

1. Add the domain or specific email address to the allowed list:

   • Navigate to Access Management > Auth Modules in IDE Services (Hub).
   • Select the relevant authentication module (e.g., JetBrains Account).
   • Add the required email domain (e.g., @<domain>.com) or email address (<name>@example.com) to the "Allowed emails and email domains" configuration field.

2. Save and apply the changes:

   • Save the updated configuration.
   • Request the affected user to retry logging in.

3. Set JetBrains Account as the default authentication method: (Optional)

   • If the organization uses multiple authentication methods, ensure that the JetBrains Account authentication module is set as the default to streamline access control.

4. Optionally, enable domain-wide authorization:

   • To simplify management, add the company's domain (e.g., @<domain>.com) to allow all users within that domain to authenticate without needing individual entries.

Additional Notes

• Users previously authenticated or manually provisioned in IDE Services prior to applying the domain restriction will still retain access unless explicitly removed.
• For organizations using additional authentication methods like SSO or custom proxies, ensure they are properly configured to allow user logins.

References

• OAuth 2.0 Auth Module Documentation
• Managing Auth Modules

If further issues arise or help is needed, feel free to reach out to JetBrains Support.